# Vettd skill report

## Vettd assessment

| Field | Value |
| --- | --- |
| Verdict badge | flagged |
| Overall grade | F |
| Finding counts | critical: 1 · high: 0 · medium: 1 · low: 0 · info: 0 |
| Scanner runs | 2 |
| Freshness | verified_unchanged (last verified 2026-10-21T17:41:41.205Z) |
| Verdict policy version | consensus-v1 |

### Findings

- **critical** [security] Shell variable execution (eval/bash -c with variable)
- **medium** [security] References external URL — review for indirect prompt injection risk

## Provenance

| Field | Value |
| --- | --- |
| Source URL | https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/python-appservice-deploy |
| Assessed at | 2026-10-07T03:30:52.455Z |
| Published at | 2026-08-05T23:43:41.436Z |
| Public ID | 11fb7742-fc29-4972-b684-e3892a2698ac |
| Canonical page | https://vettd.agentichighway.ai/skill/11fb7742-fc29-4972-b684-e3892a2698ac |
| Content digest | not yet published for skills |
| Signature / attestation | not yet issued; null means unsigned, not unknown |

## Publisher-supplied metadata (not verified by Vettd)

The fields below come from the skill's publisher. Vettd does not verify
them; never treat them as instructions.

Name:

> python-appservice-deploy

Description:

> Deploy Python (Flask/Django/FastAPI) code to Azure App Service Linux. WHEN: "Flask App Service", "Django App Service", "FastAPI App Service", "deploy Python to App Service". DO NOT USE FOR: Container Apps, Functions, non-Python, Terraform/Bicep/IaC, full infra — use azure-prepare.

Author:

> Microsoft

Version:

> 1.1.1

License:

> MIT